Pacifo：基于全同态加密的高效轻量 ResNet 框架，用于可信机器学习即服务
Pacifo: An Efficient Fully Homomorphic Encryption-based Lightweight ResNet for Trustworthy Machine Learning as a Service
AI 导读
研究者提出 Pacifo 框架，通过公私层划分方案与高效 ReLU 近似，在全同态加密（FHE）下高效推理 ResNet20，并支持灵活的安全配置以适配不同隐私需求。相比现有最先进的 FHE ResNet20 实现，运行时加速 3.7-21.7 倍，同时在下下游任务中保留原明文模型 95%-99% 的准确率。该框架已开源。
正文 · 原文
Abstract:Machine Learning as a Service (MLaaS) has become a popular paradigm for deploying AI applications. However, it raises significant privacy concerns that the raw client data needs to be uploaded to the server for inference services. Private inference using Fully Homomorphic Encryption (FHE) offers a solution by allowing computations directly on encrypted data, with only the final results decrypted on a client side. However, current practical implementations still suffer from large computational overhead and high latency due to the cost of FHE operations. In this paper, we propose Pacifo, a framework that adapts customized fine-tuning strategies to efficiently evaluate the ResNet20 model in the context of FHE. Specifically, Pacifo introduces a public-private layer partitioning scheme and an efficient ReLU approximation, significantly reducing the number of private layers and costly FHE operations during inference. It also offers flexible security configurations to accommodate varying client privacy requirements. Compared to state-of-the-art FHE implementations of ResNet20, Pacifo achieves a speedup of $3.7-21.7\times$ in runtime while effectively preserving $95\%-99\%$ of the original plaintext model accuracy across downstream tasks. Pacifo is open-sourced at this https URL.
| Subjects: | Cryptography and Security (cs.CR); Artificial Intelligence (cs.AI) |
| Cite as: | arXiv:2610.33525 [cs.CR] |
| (or arXiv:2610.33525v1 [cs.CR] for this version) | |
| https://doi.org/10.48550/arXiv.2610.33525 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Yang Li [view email]
[v1]
Sat, 24 Oct 2026 08:02:47 UTC (497 KB)
来源：arXiv cs.AI · arxiv.org